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ABSTRACT 



To provide an information recording apparatus capable of 
continuing appropriate update processing in the case where 
data updating processing is stopped on one processing 
apparatus due to a power failure or memory failure, etc. by 
using un-updated data stored in duplicate in the other 
processing apparatus. There is provided an information 
recording apparatus including a plurality of controlling units 
for recording data received from a host device on an 
information recording medium, each of which has memory, 
characterized in that the data is temporarily stored in 
memory of one controlling unit and at the same time is 
stored in duplicate in memory of another controlling unit 
and, when data recording processing carried out by the one 
controlling unit is stopped, the recording processing is 
continued by the other controlling unit by using the dupli- 
cated data, and a point at which the data updating processing 
in the one control apparatus becomes irreversible is notified 
from the control apparatus to the control apparatus having 
the duplicated data. 

7 Claims, 10 Drawing Sheets 
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INFORMATION RECORDING APPARATUS 
AND CONTROL METHOD THEREOF 

BACKGROUND OF THE INVENTION 

1. Field of the Invention 

The present invention relates to an information recording 
apparatus and an information recording method using the 
information recording apparatus, and more particularly, to 
an information recording apparatus and an information 
recording method using the information recording apparatus 
that stores un-updated data in duplicate in more than two 
physically independent memories and thereby continues the 
updating processing, when data processing by one process- 
ing apparatus is stopped due to a power failure or memory 
failure, etc., by using un-updated data duplicated on the 
other processing apparatus. 

2. Description of the Prior Art 

A disk array apparatus writes data distributed into a 
plurality of disks, creates redundant data based on this data, 
writes this data in separate disks and thereby prevents loss 
of data due to disk failures. Even if a disk fails, such a disk 
array apparatus can restore the data as far as the level of 
redundancy permits and the data is not lost unless disks 
exceeding in number the level of redundancy fail. However, 
data may be lost in the case where data is not properly 
written in the disk, which will be described later. 

Unlike a single disk, the disk array apparatus cannot 
perform a data write in one access. That is, the disk array 
apparatus requires processing in a plurality of stages such as 
reading old data which is originally written in the area in 
which data is to be written and an old parity on this old data, 
generating new parity data by using this data and data to be 
newly written and writing this data in a disk. Therefore, 
since the number of times in which the disk is accessed 
increases, which reduces the performance, a method of 
incorporating a cache memory in the disk array apparatus 
and notifying a host device of the completion of data write 
when a data transfer from the host device to the cache 
memory is completed. 

In this method, the completion of data write is notified 
when the data transfer from the host device to the cache 
memory is completed, and therefore protection of data being 
written is an absolute condition. However, this method 
requires un-updated data to be held in the cache memory for 
a long time, which is likely to lead to data loss due to a 
memory failure or power failure, etc. For this reason, two 
control apparatuses are provided, data, which is to be 
processed between these apparatuses, is copied and thus data 
is controlled in duplicate. 

BRIEF SUMMARY OF THE INVENTION 

Object of the Invention 

Thus, providing duplicated data reduces the possibility of 
data being lost due to a memory failure, power failure, etc., 
but maintaining consistency between the data recorded in 
the disk and redundant data such as parity related to this data 
is an important element for the disk array apparatus and 
losing this consistency will cause wrong data to be sent to 
the host device. 

RAID (Redundant Array of Inexpensive Disks) uses a 
data distribution method having several levels. For example, 
there are various methods, like a method called "level 3" 
(RAID 3) in which data received from the host device is 
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always divided into a plurality of disks, redundant data is 
created simultaneously with this division of data and these 
data items are written simultaneously as a data group whose 
consistency should be maintained or another method called 

S "level 5" (RAID 5) in which data is divided into sectors and 
written and parity information is added as another sector as 
in the case of normal data. 

FIG. 10 illustrates an example of data arrangement on 
disks that make up the RAID 5. The following two methods 

10 are available as data update me mods in the disk array 
apparatus with such disk arrangement: 

(1) Method of generating parity data by reading all data 
groups; whose consistency should be maintained 

(2) Method of generating parity data using old data Here, 
15 the case where a write to a block (Data #01) from the 

host device is executed will be taken as an example. In 
the method (1), block data (Data #09), (Data #11) and 
(Data #19) are read from hard disks #2, #3 and #4, 
respectively and new parity data is generated from 
20 these block data and content of new (Data #01) 
received from the host device, and the new (Data #01) 
and new parity data are written in hard disks #1 and #5, 
respectively. Furthermore, in the method (2), old data 
(Data #01) and old parity data are read from the hard 
25 disks #1 and #5, respectively, and new parity data is 
created from an exclusive OR between this old data, old 
parity data and new data (Data #01) received from the 
host device and the new (Data #01) and new parity data 
are written in the hard disks #1 and #5, respectively. 
30 The same result can be obtained by using either method. 
According to the method (1), in the case where more new 
data sent from the host device is found in the data group 
whose consistency should be maintained, the number of 
times the disk is accessed can be a small number. However, 
35 in the case of access to small blocks, the greater the number 
of disks that make up RAID, the greater the required number 
of times the disk is accessed to update one block. On the 
contrary, in the method (2), the number of times the disk is 
accessed can be a small number even when access is made 
40 to a small block. 

When the method (2) is used, creating new parity data 
requires the old (Data #01) to be finally overwritten with 
new data and the old parity data to be read. In this case, even 
if un-updated data is duplicated using the cache memories of 
45 the two control apparatuses, if processing is stopped by a 
power failure, etc. while one control apparatus is rewriting 
the old (Data #01) or old parity data, there is a possibility 
that wrong new parity data will be created when the other 
control apparatus takes over the disk data updating process- 
so ing using the duplicated un-updated data. That is, when 
processing is stopped while un-updated data or new parity is 
being written in the disk and the other control apparatus 
takes over the processing using the duplicated data, there is 
a possibility that the old data and old parity necessary to 
55 generate new parity may have already been overwritten. 
Once these old data and old parity have been overwritten, it 
will no longer be possible to generate new parity using the 
above-described method. 
According to the method (2), processing of data updating 
60 in the disk becomes irreversible upon starting a write of 
un-updated data or the new parity in the disk and attempting 
to continue the updating processing using the data dupli- 
cated by the backup control apparatus without realizing that 
this point of entering into an irreversible state is passed will 
65 end up losing data consistency. 

It is an object of the present invention to provide a disk 
array apparatus that is equipped with a plurality of indepen- 
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dent memories, protects un-updated data by maintaining which the data to be recorded or parity data on the relevant 

duplicated data in these memories, capable of carrying out data is written in a recording medium and a preferred 

data updating without data getting garbled when one control embodiment notifies the irreversible point by setting to a 

apparatus stops processing due to a power failure, etc. parity generation disabled state the parity generation dis- 

du ring a data communication and the other control apparatus S abling flag in the other controlling means that stores the 

takes over this processing properly. It is another object of the duplicated data when this write is performed or by storing 

present invention to provide a disk array apparatus capable the parity data on the data in the other recording means that 

of allowing logically consistent parity data to be used in the stores the duplicated data. This notification can be made to 

disk arrays preventing wrong data from being restored and the backup controlling means (other controlling means) via 

transferred to the host device even if the disk array apparatus 10 inter-controlling- means information communicating means 

loses redundancy when the processing is stopped. that communicates information between the controlling 

means. 

SUMMARY OF THE INVENTION The information recording method of the present inven- 

The information recording apparatus of the present inven- tion is a method of controlling an information recording 

tion is an information recording apparatus configured in 15 apparatus that records the data received from the host device 

such a way as to comprise a plurality of controlling means on a recording medium, creates parity data on this data and 

for recording data received from a host device on an records the parity data on a predetermined recording 

information recording medium with each controlling means medium, configured in such way as to temporarily store 

having memory, temporarily store the data in memory of one un-updated data sent from the host device in memory of one 

controlling means and at the same time store the data in 20 of a plurality of recording medium controlling means each 

duplicate in memory of the other controlling means and, having memory, store the un-updated data in duplicate in the 

when data recording processing carried out by the one other controlling means, allow the one controlling means to 

controlling means is stopped, allow the other controlling create new parity data on the un-updated data from 

means to continue the recording processing using the dupli- un-updated data sent from the host device, old data recorded 

cated data and allow the other controlling means to continue 25 in an area of the recording medium in which the un-updated 

processing of updating the data using the duplicated data, data is to be recorded and parity data of the old data, write 

characterized in that a point at which the data updating the un-updated data and the new parity data in a predeter- 

processing in the one control apparatus becomes irreversible mined area of the recording medium, characterized in that 

is notified from the control apparatus to the control appara- when the one controlling means writes the un-updated data 

tus having the duplicated data. 30 or the new parity data in the disk, the other controlling 

t, ,< j • l ♦ „ rt r means that stores the duplicated data is notified of the point 

Thus, the disk array apparatus of the present invention r . . n , , fo 

' A , J S . * a at which processing of recording the un-updated data 

allows a control apparatus that carries out data updatmg * l " . * & 6 r 

processing to notify a point at which processing of updating becomes irreversible. 

the data becomes irreversible to a backup control apparatus As described above, an irreversible point of data updating 

(other control apparatus) that stores duplicated data, and processing is a point m time at which un-updated data or 

therefore when the backup control apparatus takes over the new parity on this data is written in a predetermined disk, 

data updating processing, the backup control apparatus can Therefore, by notifying the backup controlling means of 

recognize whether the updating processing is in an irrevers- information that this data updating processing has become 

ible state or not and carry out processing according to the dn irreversible when the new parity is written in the disk, the 

state * u backup controlling means can take over the data updating 

More specifically, in the apparatus of the present P/ocessing Recording to need while recognizing whether the 

invention/each controlling meus comprises interface *™ *} M *c ™* processing is stopped is before or 

means for communicating with the recording medium, par- thc P 355 ^ of rclevant P 010t - 

ity generating means for generating parity data on the data, 45 The irreversible point of the data updating processing can 

inter-controlling-means information communicating means be notified by setting to a parity data generation disabled 

for communicating between control means and a parity state the parity data generation disabling flag of the backup 

generation disabling flag, and when the one recording means controlling means or copying and storing new parity data m 

stops data recording processing, notification that the data the memory of the backup controlling means, 

recording processing becomes irreversible is made by set- 50 In this case, when the one controlling means stops data 

ting the parity generation disabling flag in other recording writing to the recording medium after the other controlling 

means that stores the duplicated data to a parity generation means that stores the duplicated data is notified of disabling 

disabled state. of parity data re-generation, it is desirable to decide whether 

Furthermore, in the apparatus of the present invention, there is redundancy in the information recording apparatus 

each controlling means comprises interface means for com- 55 or not > and if no redundancy is found, it is desirable that the 

municating with the recording medium, parity generating duplicated data stored in the other controlling means be 

means for generating parity data on the data and inter- written in a predetermined recording medium and the 

controlling-means information communicating means for memory of the other controlling means that stores the 

communicating information between the controlling means, duplicated data store information that parity data on the data 

and when the one recording means stops data recording 6 q is invalid. 

processing, notification that the data recording processing Such a configuration prevents parity data from being 

becomes irreversible is made by storing parity data on the regenerated and rewritten based on data, which has lost 

data to be subjected to the recording processing created by consistency. More specifically, the information whether the 

the one controlling means in the memory of the other new parity data is invalid or not is stored by destroying the 

recording means that stores the duplicated data. 65 ECC of this parity data. 

Here, the point at which the data recording processing Furthermore, when the one controlling means stops data 

becomes irreversible is more specifically a point in time at writing to the recording medium after the other controlling 
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means that stores the duplicated data is notified of parity data 1 is a block diagram showing a configuration of a first 

re-generation disabling, it is desirable to decide whether embodiment of the disk array apparatus of the present 

there is redundancy in the information recording apparatus invention. This disk array apparatus Js_configured by a 

or not, and if no redundancy is found, it is desirable to read plurality of hard disks WO and two array decontrol 

the duplicated data stored in the other controlling means, 5 ^pparatuses-ljnd-l^that-contronhese harddisks-100. The 

generate new parity from data stored in a data recording area hard disks 100 are used in parallel, forming a RAID. The 

other than the area in which the data is to be recorded, array disk control apparatuses^audj' are connectedto a 

overwrite this parity in a parity data writing area and erase hosj^e^(not^ho^^^ (not 

the information that the parity data in memory of the shown^d control writin^ofd^^ 

controlling means is invalid. 10 inmehard-disksJOO. The control apparatuses 1 and 1' have 

. r t , - . j • 1 *. the same configuration and are configured so as to commu- 

Even if there is do redundancy in the disk array apparatus j£ ^ c(mtrol * sent from ^ host 

when writing . stopped to allows correct data with ^ 

consistency to be written if the condition is met. ^ ^ ^ 1 a cache memory n 

In the case where the irreversible point of the data to temporarily store data exchanged between the host device 

updating processing is notified by copying and storing new and hard ^ 100> a hard ^ mterface contro i sect j on u 

parity data in the memory of the backup controlling means, that mnrtQ y the between the hard disk 100 and 

it is possible to continue write processing using the dupli- cache mcmory u j a parity generator 13 that generates parity 

cated new parity even if the write processing is stopped after daU when data fe Qewly stored in the hard disk 100> a parity 

the irreversible point of data updating processing is passed. gcnera tion disabling flag 14 and cross call controlling means 

Therefore, even if the disk array has lost redundancy, it is 15 

possible to send correct data to the host device without When un-updated data is written in the disk 100 according 

losing data. t0 a command from the host device, the parity generation 

rrtff nF<;rRTPTinN OF THF DRAWINGS disabling flag 14 is used to disable further parity generation 

BRIEF DESCRIPTION OF THE DKAWlNub ^ ^ ^ ^ ^ apparatus while the other array 

This above-mentioned and other objects, features and disk control apparatus reads old data and old parity from the 

advantages of this invention wilt become more apparent by corresponding hard disk, calculates new parity and writes 

reference to the following detailed description of the inven- un-updated data and new parity in the hard disk 100. For 

tion taken in conjunction with the accompanying drawings, example, in the case where the array disk control apparatus 

wherein: 30 1 writes un-updated data, the parity generation disabling flag 

FIG. 1 is a block diagram showing a configuration of a 14' of the array disk control apparatus 1' is set to a disabled 

first embodiment of a disk array control apparatus of the state jwhenjhej^p^ty^^ 

present invention The-cross-call-ci3ntroUmg-means-15_contr6ls.communi- 

FIG. 2 is a block diagram showing a basic operation of carious for^data duplication between the two array disk 

data updating in the disk array control apparatus of the 35 control apparatuses 1 and 1 and exchange of information 

preseni invention; betwee ? ! he arra y disk ^trol apparatuses such as opera- 

™~ „ . a • , • • .u tions of the parity generation disabling flag 11. 

FIG. 3 is a flow chart showing data write processing in the pjQ 2 fe \ drawing to explain basic operations for data 

disk array control apparatus of the present invention shown ^ d ^ g by ^ ^ afray apparatus of the present invcD . 

^ G 1; 40 tion. Here, suppose parity data obtained from the data of the 

FIG. 4 is a flow chart showing data recovery processing same address in a plurality of disks is used as redundant data 

of the disk array control apparatus shown in FIG. 1 when to^orm a level-5 RAID. 

(When write data sent from the host device is stored in the 



data write processing is stopped; 

FIGS. 5a, Sb, and 5c are block diagrams to explain 
recovery processing for data whose ECC has been destroyed 
during data recovery processing in the disk array control 
apparatus shown in FIG. 1; 

FIG. 6 is a flow chart showing recovery processing for 
data whose ECC has been destroyed during data recovery 
processing in the disk array control apparatus shown in FIG. 
1; 



45 
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cache memory 11 of the array disk control apparatus 1, this 
data is transferred to the cache memory 11' of the other array 
disk control apparatus 1' via the cross call control means 15 
to 'duplicate the data. When the transfer for data duplication 
is completed correctly, fwriteTinstmction completion report^ 
is sent to-me-host-device-and stotage^oLthe-un-updated data 
infthe cache memory is completed. 

Then, the array disk apparatus 1 calculates the disk 



FIG. 7 is a block diagram showing a configuration of a number and block address at which the un-updated data is to 

second embodiment of the disk array control apparatus of be written, reads the old data written in the block and sends 

the present invention; foe old data t0 ^ P arit y generator 13 via the hard disk 
FIG. 8 is a flow chart showing data write processing in the 55 interface control section 12 Furthermore, Jhc ^ array disk 

disk array control apparatus shown in FIG 7; 1 calcul f s the d * k ™ mbe ' an ? bl ° ck ^dress at 

« ■ a l i- • j * • which the parity data corresponding to this block is to be 

FIG 9 is a flow chart showing data recovery processing P £ qW ^ ^ M {Q ^ 

in the disk array control apparatus shown in FIG. 7 when ^ ^ ^ ^ , n addition tQ thcsc ^ 

data write processing is stopped; and ^ ^ ^ memory u sends un . updaled dala l0 

FIG. 10 iflustrates an example of data arrangement on a ^ parhy gcnerator 13 ^ d mc circuit 13 generates new 

disk having a level-5 RAID configuration. parity from m exclusive 0 R of these three data items. 

DETAILED DESCRIPTION OF THE (Corresponds to processing in 0 FIG. 2. The order of these 

PREFERRED EMBODIMENTS three data items is out of the question here.) 
[First Embodiment] 65 Then, the un-updated data and newly created parity data 

With reference now to the attached drawings, embodi- are written in a predetermined block calculated beforehand 

ments of the present invention will be explained below. FIG. so as to maintain data consistency between the plurality of 
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disks 100. (Corresponds to processing in 0 FIG. 2. The the other array disk control apparatus 1' starts processing of 

order of these three data items is out of the question here.) taking over this processing. First, the other array disk control 

Since redundant data is created in this way, in the case apparatus 1' checks whether the duplicated un-updated data 

where processing is stopped due to a power failure, etc. 121', which is a backup of the un-updated data, exists in the 

while the un-updated data and new parity data are being 5 cache memory IT of the array disk control apparatus 1* or 

written in the disk 100, that is, while processing in 0 FIG. not (step 401). In the case where the backup data 121* of the 

2 is in progress, even if the other array disk apparatus 1* un-updated data does not exist in the cache memory IT (step 

attempts to continue processing by using the duplicated, 402, NO), it is decided that there is no stopped write 

un-updated data, old data and old parity necessary to gen- processing and the processing is completed. On the other 

erate new parity have already been overwritten and it may be 10 hand, in the case where the backup data 121' of the 

no longer possible to generate new parity using the above- un-updated data exists (step 402, YES), it is decided that the 

described method. That is, processing of updating data to the write processing in the array disk control apparatus 1 has 

disk 100 becomes irreversible after the point at which a write been stopped and processing of taking over the processing 

of the new parity to the disk is started, and therefore in order ( s t e p 402). 

to maintain data consistency when one control apparatus 1 15 In me case wnere step 402 reS ults in YES, when the write 

stops write processing and the other control apparatus 1' processing is stopped, the array disk control apparatus 1 

takes oyer the processing, it is necessary to perform write decides whether a data write t0 ^ hard disk 100 has been 

processing taking account of the time at which this irrevers- s{ ^ 6 QT ^ ^ ^ ^ processing has 5een 

Sr?? 1 ? * p * ssed . . . , . # . fAt - t stopped before or after the passing of the irreversible point 

FIG. 3 is a flow chart to explain operation of data write {s ™ m y This decision can be made more specifically by 

processing in the disk array apparatus shown in FIG. 1. \ f.. } , . . . im e 

P First, one array disk control apparatus 1 receives data by ^ thcr ^ration ^abhng flag 14 of 

a write instruction from the host device and stores the data *»y conteol apparatus 1* is in a disabled state or 

in the cache memory 11 as un-updated data 121. This data &eed from a oisMcd state. 

is-copLediLo-the-cache-r^mbT^ll' of the other array disk In the «se where the disabled state of the panty genera- 
apparatus lUo~createduplicated un-updated data 121' (step 25 tion disabling flag 14' is canceled (step 402, NO), the array 
301) disk control apparatus 1 decides that a data write to the hard 
Then, the address of the disk in which the un-updated data disk 100 has not been started and processing similar to 
121 is written and the address of the parity data correspond- normal write processing is carried out by the array disk 
ing to this are calculated and the old data and old parity are control apparatus 1*. 

read from their respective storage areas (step S302). Then, 30 That is, the address stored in the cache memory 11' at 

the parity generator 13 calculates an exclusive OR of the old which the backup un-updated data 121' is written and the 

data, old parity read in this way and un-updated data 121 and corresponding parity address are calculated and the old data 

creates new parity data (step 303). At this time, the start of and old parity are read from the recording area in which 

a data write to the hard disk 100 is notified to the other array these addresses exist (step 404). An exclusive OR between 

disk control apparatus 1' via the cross call controlling means 35 the old data, old parity and backup un-updated data 121 f read 

15. More specifically, the parity generation disabling flag 14' in this way is calculated and new parity is created (step 405). 

in the array disk apparatus 1' is set to a parity generation Here, the parity generation disabling flag 14 in one array 

disabled state (step 304). disk control apparatus 1 is set to a parity generation disabled 

Then, the un-updated data 121 and new parity are written state via the cross call controlling means 15' (step 406). 

in the area calculated beforehand (step 305)-and when Jhis 40 Then, the backup un-updated data 121' and newly generated 

w^iteiisrcompieted, the^^pdate7irdala^2ririrrvalidated parity are written in a pre-calculated recording area (step 

and erased-from^t he cac he_memory— 11 (step 306). 407) and when this writing to the disk 100 is completed, the 

Furthermo7e7~the otrTer'arrayHislc control apparatus V is un-updated data 121' is invalidated and erased from the 

notified via the cross call controlling means 15 that the write cache memory IT (step 408). Then, the original un-updated 

to the hard disk 100 is completed and erasure of the 45 data 121 stored in the cache memory 11 of one array disk 

duplicated data is instructed. More specifically, the apparatus is erased and at the same time the parity genera- 

un-updated data 121' duplicated in the cache memory IT of tion disabled state of the parity generation disabling flag 14 

the other array disk control apparatus 1' is deleted and the is canceled (step 409). 

parity generation disabled state of the parity generation The processing in step 406 and step 409 described above 

disabling flag 14' in the control apparatus 1' is canceled (step 50 are instructions to the array disk control apparatus 1 that has 

307). stopped write processing due to a fault, and therefore need 

In the case where write processing in the array disk not always be executed, but processing totally identical to 

control apparatus 1 is completed normally, the other array normal processing is performed here and the cross call 

disk control apparatus 1' only duplicates the un-updated data controlling means 15' disables this processing. 

121, erases duplicated un-updated data 121', sets or resets 55 On the other hand, in the case where the parity generation 

the parity generation disabling flag 14 and performs no disabling flag 14' is not cancelled (step 403, YES) in step 

processing of writing to the block. However, in the case 403, it is decided that the array disk control apparatus 1 has 

where write processing is stopped due to a power failure to started data writing to the hard disk 100 and the writing is 

the array disk control apparatus 1 that performs a write, the stopped after the irreversible point is passed, and therefore 

other array disk control apparatus 1' detects this stoppage of 60 processing different from normal write processing is 

processing and takes over the write processing using the required. That is, since the old data and old parity written in 

duplicated un-updated data 121*. the disk 100 may be destroyed, it is not possible to create 

FIG. 4 is a flow chart showing the processing by the other new parity using this data, 

array disk control apparatus 1' when a data write by the array In this case, the un-updated data 121', which is backup 

disk control apparatus 1 is stopped. 65 data, is written in the disk (step 410). This writing sets data 

As shown in FIG. 4, when a failure such as power other than the parity to a writing completed state including 

interruption at the array disk control apparatus 1 is detected, the disk in which no rewrite has been performed. Then, 
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whether the disk array apparatus has redundancy or not is First, it is decided whether the disk array apparatus has 

checked (step 411) and if the disk array apparatus has redundancy or not (step 601) and in the case where the disk 

redundancy (step 411, YES), new parity is created using data array apparatus has redundancy (step 601, YES), new parity 

of the other disk and written in the block of the correspond- is created using all interfering disk data items and a write is 

ing new parity (step 412). On the other hand, if the disk array 5 performed to the block of the relevant parity (step 602). 

apparatus has no redundancy due to a disk failure, etc. (step Operations of these steps 601 and 602 correspond to the 

411, NO), new parity cannot be created using the other disk operation in FIG. 5A above. 

array, and therefore the error correction code (ECC) of the Qn ±c othcf hand> in thc case . whcrc it ^ decided that the 

block in which the new parity is to be written is destroyed ^ apparatus has no redundancy (step 601, NO), it is 

so that a read err or is output fr om the relevant block (step 1Q checked whethcf ^ hafd ^ m whicfa ^ un . updatcd data 

™_ f " • • \ ^TTT^ in i .« is to be written is, faulty or not (step 603). In the case where 

When the processing in.step=412^or_step 413 ends, the . , , t . ' . c \. . . \ n : vco\ i A * a 

parity generauon-msabled-state^f the parity generation J» hard 1S <f % "™P**<* 

disabling flag 14' is canceled (step 414) and the backup dat * 15 hard ^ ,™ d J? J™**™* ends f 

un-updaled 121' is invalidated and erased from the cache ™ thout wn j£g *° ^J** ( P * 09 > *^ erall ° ns of 

memory 11' (step 415) and the succeeded write processing is « these steps 603, 604 and 609 correspond to the operation in 

finished FIG. 5B above. 

For simplicity of explanation, this embodiment is On the other hand, m the case where the hard disk in 

explained assuming that only one un-updated data 121 or which the un-updated data is to be written is faulty and it is 

one parity generation disabling flag 14 exists, but when a not possible to write the un-updated data in this disk (step 

plurality of data items is processed simultaneously, it is 20 604, NO), the parity data and all data stored in the disks 

possible to perform the same processing by providing parity other than the faulty disk are read (step 605) and new parity 

generation disabling flags 14 corresponding in number with data is created from the data read and un-updated data (step 

data items to be processed. 606). Then, the new parity data is written and the un-updated 

FIGS. Sa-Sc and FIG. 6 are the drawings to describe the data is discarded and the processing ends (step 607). This 

details of data writing when the old data and old parity are 25 new parity data is consistent with the un-updated data 

destroyed. written in step 410 and these two data items are recovered 

As described above, in the case where it is decided in step as valid data. Operations of these steps 605, 606 and 607 

411 that the disk array apparatus has redundancy, in step correspond to the operation in FIG. 5C above. The parity 

412, it is possible to generate new parity by using data stored generation disabling flag 14' of the array disk control appa- 
in another disk having consistency with the data to be 30 ratus 1' disables the generation of parity data from an 
written. For example, as shown in FIG. 5A, in the case exclusive OR of the old parity, old data and un-updated data, 
where the parity data is destroyed, all hard disks 100 are and therefore does not affect the generation of parity data 
available, two data items (DATA #1) and (DATA #2) are here. 

valid and this parity is (Parity #1-2), it is possible to simply This configuration at least prevents wrong data from 

obtain new parity from these two data items. 35 being written and reported to the host device. Furthermore, 

On the other hand, in the case where the hard disk in if conditions are met, even if the old data is destroyed, it is 

which the data (DATA #2) is to be written is faulty (step 411, possible to appropriately recover the data and perform 

NO), it is possible to restore the content of the data (DATA writing. 

#2) only when (DATA#1) and parity (Parity #1-2) are valid. [Second Embodiment] 

In the case where writing of data consistent with parity 40 FIG. 7 is a block diagram showing a configuration of a 

(Parity #1-2) fails due to a problem of the disk, the ECC of second embodiment of the disk array apparatus of the 

the data is destroyed (step 413) producing a parity (Parity present invention. The second embodiment is also equipped 

#1-2) read error and preventing data from being recovered with a plurality of hard disks 100 and two array disk control 

with wrong parity data (Parity #1-2) when the host device apparatuses 1 and 1' that control these hard disks 100, uses 

issues a data (DATA #2) read instruction. 45 the hard disks 100 in parallel, forming a RAID. The control 

This state is recovered by executing the data (DATA #2) apparatuses 1 and 1' have the same configuration and are 

read instruction from the host device. That is, as shown in configured so as to be able to control data sent from the host 

FIG. 5B, when an attempt is made to execute a write device in duplicate. Since the second embodiment is the 

instruction on the data (DATA #1), it is not possible to read same as the first embodiment shown in FIG, 1 except the 

the old parity because the ECC of the data (DATA #1) parity 50 points described below, the same components will be 

is destroyed, and therefore only overwriting of the data assigned the same reference numerals and explanations 

(DATA#1) is executed. In this state, though the content of thereof will be omitted. 

the data (DATA #1) is correct, consistency between the As shown in FIG. 7, the second embodiment has no parity 

(DATA #1) and parity (Parity #1-2) is not maintained. generation disabling flag 14 in the first embodiment, stores 

On the other hand, as shown in FIG. 5C, when a write 55 new parity data 122 in a cache memory 11 instead, dupli- 

instruction on the data (DATA #2) is executed, the hard disk cates this new parity data by transferring the new parity data 

in which the data (DATA #2) sent from the host device is to to a cache memory 11* in the other array disk control 

be written is faulty and writing is not possible, and therefore apparatus 1' via a cross call controlling means 15 (new parity 

it is possible to create new parity from this data and the data 122') In this example, whether this duplicated new 

content of the data (DATA#1) which can be read normally 60 parity 122' exists or not decides whether the state is before 

and overwrite the new parity together with normal ECC. or after the point at which processing of writing to the disk 
This processing allows the already overwritten data (DATA becomes irreversible. 

#1) and parity (Parity #1-2) to become valid data having In the case where, for example, writing is stopped due to 
consistency and be restored as the content of data (DATA a power failure, etc. after the point at which processing of 

#2). 65 writing to the disk becomes irreversible, the above- 

The above operation will be explained by using the flow described first embodiment cannot assure the validity of the 

chart shown in FIG. 6. old data to generate new parity. Because of this, when the 
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disk array apparatus has lost redundancy, it is not possible to 902, YES), it is decided that writing has been stopped and 

generate new parity and it is only possible to recognize the processing is taken over (step 902), 

whether the relevant data is lost or not when data is read First, whether the write processing has been stopped 

later. before or after the passing of the irreversible point is decided 

On the contrary, the second embodiment decides through $ by whether duplicated new parity data 122' exists in the 

the existence of the duplicated new parity data 122' whether cache mcmory U' of the array disk control apparatus 1* or 

the time at which writing is stopped is before or after the not ( ste p 903) 

point at which processing of writing to the disk becomes [n tfac casc whcre ^ ncw dt data 122 , is not storcd in 

irreversible. In the case where the time at which writing is ^ cache mem u , ^ means tnat ^ ^ rocessing 

stopped is after the point at which write processing becomes w fa ^ ^ QQnUo] s t ^ bccQ d beforc 

irreversible the second embodiment allows the write pro- irrever ; ible pointj an d therefore normal write processing 

cessing to be conUnued by using the duplicated new parity . . , K ' . . , a * a a K 

data 122'. Therefore, even if the disk array has lost redun- 15 £ rfom * d ^ the ^T,t TZ a } }a . 

dancy and writing is stopped after the point at which write ™at address at which the bacfaip un-updated data 

processing becomes irreversible, it is possible to write 121 15 t0 be , ™ tte ? ***** ^dress °{ corresponding 

correct data without erasing data or causing errors during a 15 panty are calculated and the old data and old parity are read 

data read. fr° m tne * r respective recording areas (step 904). Then, an 

FIG. 8 is a flow chart showing a write processing opera- exclusive OR of the old data, old parity and backup 

tion in the second embodiment of the disk array apparatus un-updated data 121' is calculated, and thereby new parity 

according to the present invention. 122' is generated and stored in the cache memory 11' (step 

Data is received by a write instruction from the host 20 905). Then, the new parity 122 is transferred to the cache 

device and stored as un-updated data 121 in the cache memory 11 in the one array disk control apparatus 1 via the 

memory 11 of one array disk control apparatus 1 and this cross call controlling means 15' and thereby the new parity 

data is copied to the cache memory 11* of the other array disk is duplicated (step 906). The un-updated data 121', which is 

apparatus l 1 to create duplicated un-updated data 121 (step backup data, and newly generated parity 122' are written in 

801). Then, the address at which the un-updated data is to be 25 a pre-calculated area (step 907) and when this writing is 

written and the address of the parity that corresponds to this completed, the un-updated data 121' and new parity 122' are 

are calculated and the old data and old parity are read from invalidated and deleted from the cache memory 11' (step 

this address storage area (step 802). Then, new parity is 908) and at the same time the original un-updated data 121 

generated from the old data, old parity read in this way and is deleted from the cache memory 11 in the array disk 

un-updated data 121 and stored as new parity data 122 in the 30 control apparatus 1 via the cross call controlling means 15 

cache memory 11 (step 803). Furthermore, this new parity (step 909). 

data is transferred to the cache memory 11' in the other array Operations in step 906 and step 909 are instructions to the 

disk control apparatus 1' via the cross call controlling means faulty array disk control apparatus 1, and therefore these 

15 and thereby the new parity is duplicated (step 804). Then, operations need not be executed, but here the same process- 

the un-updated data 121 and new parity 122 are written in a 35 ing as normal processing is executed and invalidated by the 

pre-calculated writing area (step 805) and when this writing cross call controlling means 15'. j 

is completed, the un-updated data 121 and new parity 122 R On the ot her hand, in the case where the new- parity-122' 

are invalidated and erased from the cache memory 11 (step \ \is:storedjntfie~cache memoryll' ofl^array^dskapparatus 



806). Furthermore, the duplicated un-updated data 121' and I' (step 903, YES)rtms-meansthat write processing in the 

new parity 122' are deleted from the cache memory 11' in the 40 array control apparatus 1 has been stopped after the passing 

other array disk apparatus via the cross call controlling | of the irreversible point, and therefore processing different 

means 15 (step 807). ( Criom normal write processing needs to be performed. 

When this series of write processing has been completed \ \ Here, the old data and old parity written in the disk 100 

normally, the other array disk control apparatus V only 1 may have been destroyed, but since the parity data 122' for 

duplicates or erases the un-updated data 121 and new parity 451 a backup of the new parity 122 generated using the old data 

122 and performs no processing of writing to the block, but 1 and old parity is saved in the cache memory 11', there is no 

in the case where the write processing is stopped because, 1 need to generate new parity. Therefore, the backup data 121' 

for example, a power failure occurs with the array disk for the un-updated data 121 is written in a predetermined 

control apparatus 1 while write processing is in progress, disk (step 910) and the duplicated new parity 12_2liswntten 

this stoppage of processing is detected and the write pro- 50 tin .the, p redeterm ined disk (step 911). When wnting.ofjhese 

cessing is taken over by using the duplicated un-updated ^ackup-unrupdated^d^Tlii' and backup new parity 122' is 

data 121' and new parity 122'. 'completed, the backup un-updated data 121' and backup new 

FIG. 9 is a flow chart when the array disk control parity 122' are invalidated and erased from the cache 

apparatus 1 stops write processing and the other array disk memory IT and write processing ends (step 912). 

control apparatus 1' takes over this processing. 55 j jFor simplicity of explanation, the above -described 

When an error such as power failure is detected in the embodiment describes the case where only one un-updated 

array disk control apparatus 1, which is executing write 121 and one new parity 122 exist, but in the case where a 

processing, the other array disk control apparatus 1' first plurality of blocks is processed simultaneously, duplicating 

checks whether the backup data of the un-updated data 121, new parities 122 corresponding in number with the blocks 

that is, the duplicated un-updated data 121' exists inside the 60 can achieve the same effect. 

cache memory 11* of the relevant control apparatus 1* or not Like this, when write processing of the array disk control 

(step 901). In the case where the backup data 121' of the apparatus 1 is stopped, the second embodiment duplicates 

un-updated data does not exist in the cache memory 11' (step new parity generated and thereby makes it possible to decide 

902, NO), it is decided that there is no stopped write whether write processing has been stopped before or after 

processing and the processing ends. 65 the irreversible point of the processing. Therefore, even if 

On the other hand, in the case where the backup data 121' the processing is stopped after the passing of the irreversible 

of the un-updated data exists in the cache memory 11' (step point, the duplicated new parity 122' can be used and there 
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is no need to newly generate new parity, and in this way data 
is not lost even if writing is stopped while redundancy of the 
disk array is lost. 

As described above, even if processing of writing to the 
disk is stopped due to a power failure, etc., the present 
invention makes it possible to clearly know whether write 
processing is stopped before or after a point at which write 
processing becomes irreversible by notifying the irreversible 
point between two array disk control apparatuses and appro- 
priately take over the write processing according to the point 
at which the write processing is stopped. Therefore, the 
present invention eliminates the problem of generating 
wrong parity data and writing data and can provide a highly 
reliable disk array processing apparatus capable of writing 
data without data getting garbled even if writing is stopped 
at any time. 

Furthermore, when writing is stopped while the disk array 
apparatus has redundancy, the present invention can repair 
without losing data, and even if writing is stopped while the 
disk array apparatus has no redundancy, the present inven- 
tion can at least eliminate the problem of wrong data being 
sent to the host device. 

The invention may be embodied in other specific forms 
without departing from the spirit or essential characteristic 
thereof The present embodiments are therefore to be con- 
sidered in all respects as illustrative and not restrictive, the 
scope of the invention being indicated by the appended 
claims rather than by the foregoing description and all 
changes which come within the meaning and range of 
equivalency of the claims are therefore intended to be 
embraced therein. 

What is claimed is: 

1. An information recording apparatus configured in such 
a way as to comprise a plurality of controlling means for 
recording data received from a host device on an informa- 
tion recording medium with each controlling means having 
memory, temporarily store said data in memory of one 
controlling means and at the same time store said data io 
duplicate in memory of the other controlling means and, 
when data recording processing carried out by said one 
controlling means is stopped, allow said other controlling 
means to continue the recording processing by using said 
duplicated data and allow said other controlling means to 
continue processing of updating said data by using said 
duplicated data, wherein a point at which the data updating 
processing in said one control apparatus becomes irrevers- 
ible is notified from the control apparatus to the control 
apparatus having said duplicated data, said each controlling 
means comprising: 

interface means for communicating with said recording 
medium; 

parity generating means for generating parity data on said 
data; 

inter-controlling-means information communicating 
means for communicating information between control 
means; and 

a parity generation disabling flag. 

2. An information recording apparatus configured in such 
a way as to comprise a plurality of controlling means for 
recording data received from a host device on an informa- 
tion recording medium with each controlling means having 
memory, temporarily store said data in memory of one 
controlling means and at the same time store said data io 
duplicate in memory of the other controlling means and, 
when data recording processing carried out by said one 
controlling means is stopped, allow said other controlling 
means to continue the recording processing by using said 
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duplicated data and allow said other controlling means to 
continue processing of updating said data by using said 
duplicated data, wherein a point at which the data updating 
processing in said one control apparatus becomes irrevers- 
s ible is notified from the control apparatus to the control 
apparatus having said duplicated data, said each controlling 
means comprising: 

interface means for communicating with said recording 
medium; 

10 parity generating means for generating parity data on said 
data; 

inter-controlling-means information communicating 
means for communicating information between control 
j5 means, 

wherein when said one recording means stops data 
recording processing, notification that the data record- 
ing processing becomes irreversible is made by storing 
parity data on the data to be subjected to said recording 
2Q processing created by said one controlling means in the 
memory of the other recording means that stores said 
duplicated data. 
3. An information recording method using an information 
recording apparatus configured in such a way as to comprise 
25 a plurality of controlling means for recording data received 
from a host device on an information recording medium 
with each controlling means having memory, temporarily 
store said data in memory of one controlling means and at 
the same time store said data in duplicate in memory of the 
30 other controlling means and, when data recording process- 
ing carried out by said one controlling means is stopped, 
allow said other controlling means to continue the recording 
processing by using said duplicated data and allow said 
other controlling means to continue processing of updating 
35 said data by using said duplicated data, wherein a point at 
which the data updating processing in said one control 
apparatus becomes irreversible is notified from the control 
apparatus to the control apparatus haviog said duplicated 
data, wherein the method 
40 records the data received from the host device on a 
recording medium, creates parity data on this data and 
records the parity data on a predetermined recording 
medium, configured in such as way as to temporarily 
store un-updated data sent from said host device in 
45 memory of one of a plurality of recording medium 
controlling means each having memory, store said 
un-updated data in duplicate in the other controlling 
means, allow said one controlling means to create new 
parity data on said un-updated data from un-updated 
50 data sent from the host device, old data recorded in an 
area of said recording medium in which said 
un-updated data is to be recorded and parity data of said 
old data, write said un-updated data and said new parity 
data in a predetermined area of said recording medium, 
55 wherein when said one controlling means writes said 
un-updated data or said new parity data in said disk, the 
other controlling means that stores said duplicated data 
is notified of the point at which processing of recording 
said un-updated data becomes irreversible. 
60 4. An information recording method using the information 
recording apparatus according to claim 1, said one control- 
ling means configured in such way as to create new parity 
data on un-updated data from said un-updated data sent from 
said host device, old data recorded in an area of said 
65 recording medium in which said un-updated data is to be 
recorded and parity data of said old data and write said 
un-updated data and said new parity data in a predetermined 
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area of said recording medium, wherein when said one 
controlling means writes said un-updated data or said new 
parity data in said disk, said parity generation disabling flag 
of the other controlling means that stores said duplicated 
data is set to a parity generation disabled state. 5 

5. The information recording method according to claim 

4, wherein when said one controlling means stops data 
writing to the recording medium after the other controlling 
means that stores said duplicated data is notified of parity 
data recreation disabling, it is decided whether there is 10 
redundancy in said information recording apparatus or not, 
and if no redundancy exists, the duplicated data stored in 
said other controlling means is written in a predetermined 
recording medium and the memory of said other controlling 
means that stores said duplicated data stores information that 15 
parity data on said data is invalid. 

6. The information recording method according to claim 

5, wherein when said one controlling means stops data 
writing to the recording medium after the other controlling 
means that stores said duplicated data is notified of parity 20 
data recreation disabling, it is decided whether there is 
redundancy in said information recording apparatus or not, 
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and if no redundancy exists, the duplicated data stored in 
said other controlling means is read, new parity is generated 
from data stored in a data recording area other than the area 
in which said data is to be recorded, this parity is overwritten 
in a parity data write area and the information that the parity 
data in memory of said other controlling means is invalid is 
erased. 

7. An information recording method using the information 
recording apparatus according to claim 2, said one control- 
ling means configured in such way as to create new parity 
data on un-updated data from said un-updated data sent from 
said host device, old data recorded in an area of said 
recording medium in which said un-updated data is to be 
recorded and parity data of said old data and write said 
un-updated data and said new parity data in a predetermined 
area of said recording medium, wherein when said one 
controlling means writes said un-updated data or said new 
parity data in said disk, said new parity data is copied and 
stored in the other controlling means that stores said dupli- 
cated data. 

* * * * * 
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